Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
File: R-7_wnFGJLkjfa3lP70kQfQZKsc.mft (raw, json)
Hash identifier: orz2VuZBu1NJ57mz9BvHT4iSuJbfKilfYWIebbj8y5c=
Subject key identifier: 0F:A3:C7:B3:60:9A:4B:6F:E2:49:E0:E1:9C:75:F9:25:CB:81:58:2B
Authority key identifier: 47:EE:FF:C2:71:46:24:B9:23:7D:AD:E5:3F:BD:24:41:F4:19:2A:C7
Certificate issuer: /CN=47eeffc2714624b9237dade53fbd2441f4192ac7
Certificate serial: 019A4F2B1D58070D41B6A9DFC57458A07A8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
Manifest number: 06AA
Signing time: Tue 04 Nov 2025 14:00:16 +0000
Manifest this update: Tue 04 Nov 2025 14:00:16 +0000
Manifest next update: Wed 05 Nov 2025 14:00:16 +0000
Files and hashes: 1: R-7_wnFGJLkjfa3lP70kQfQZKsc.crl (hash: /w9m2nxSMxw0OakoPXoNceNo9v1zL8l0ahLt0eOImd4=)
2: b0DuHL5Cx5oz0wmVPh9cLl0pYOs.roa (hash: 0vfXcmcuR2v9A+x1r5OGZhYbvc69ht+h4cnEKv+PZSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:1d:58:07:0d:41:b6:a9:df:c5:74:58:a0:7a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47eeffc2714624b9237dade53fbd2441f4192ac7
Validity
Not Before: Nov 4 14:00:16 2025 GMT
Not After : Nov 5 14:00:16 2025 GMT
Subject: CN=0fa3c7b3609a4b6fe249e0e19c75f925cb81582b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e8:17:3a:5f:d5:5f:0d:ef:02:c2:e3:ab:62:
ea:b8:de:72:d7:c6:28:11:38:15:b0:b6:7c:d9:27:
f1:df:b9:fa:af:5d:26:4a:45:31:de:32:72:96:a3:
b6:f9:57:38:4c:1e:81:ae:d1:aa:61:97:71:98:e4:
d0:53:b2:37:48:d9:ee:68:d5:51:3c:62:47:fe:5b:
25:0c:8b:be:e8:84:99:01:e1:26:4c:42:c8:e1:09:
a5:83:56:c4:65:1a:5e:5c:9d:38:83:4d:10:3d:af:
51:74:28:48:a7:19:c2:d1:45:ed:b3:4b:31:51:3f:
af:d7:68:06:a5:d6:91:72:90:75:10:0f:7a:86:18:
44:23:a8:99:6b:9d:a8:3e:ef:e1:a7:e7:b6:86:cd:
b5:d8:f1:40:48:16:ff:88:3c:03:28:b0:9d:a5:85:
04:cf:e6:47:c9:c3:64:ae:d2:e0:6f:da:a0:ac:48:
d9:40:94:56:10:fa:d1:dd:b5:43:9b:12:e8:11:a7:
e9:b5:90:da:d7:e2:27:c6:43:d4:8f:04:83:5a:ea:
e8:41:77:6a:cc:d4:01:db:63:09:5e:bb:c6:e3:ce:
92:90:bd:68:c2:a1:87:18:67:41:fb:ce:3d:d0:21:
23:17:ba:9f:9f:24:7f:4a:57:0c:34:1e:b0:de:5f:
bf:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A3:C7:B3:60:9A:4B:6F:E2:49:E0:E1:9C:75:F9:25:CB:81:58:2B
X509v3 Authority Key Identifier:
keyid:47:EE:FF:C2:71:46:24:B9:23:7D:AD:E5:3F:BD:24:41:F4:19:2A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:41:af:a2:c6:a3:13:01:48:95:29:b6:37:4a:8b:44:a3:29:
4c:50:be:1e:46:28:93:3c:98:0a:1d:18:7d:0c:b7:9f:86:d1:
0b:0c:02:60:73:c0:08:91:9e:50:ba:2a:5d:41:89:20:a9:d4:
83:fc:e4:f8:83:d3:fb:b0:9b:0b:61:d5:6d:a2:90:28:63:78:
f6:d2:67:32:24:43:7e:45:42:a4:c0:6a:16:49:f2:18:e7:25:
06:9a:4f:63:b2:10:98:e0:00:5b:52:96:84:98:8c:6d:54:41:
f4:26:fc:e7:55:da:8c:be:f9:2d:4a:23:b5:3d:2e:9f:af:f5:
eb:c5:30:d4:da:7c:97:df:f2:03:a9:42:8c:6d:8e:94:02:48:
79:7b:e5:8d:e3:d0:79:2c:12:36:45:fc:90:82:c9:ea:f8:b6:
0f:74:f3:91:61:aa:07:36:45:f6:ae:db:8d:dc:ae:8a:a0:6f:
25:a0:9f:30:e1:6f:32:50:db:e0:0c:a1:5b:9c:c4:f5:cf:63:
de:04:46:2f:a0:f5:8e:a5:ce:45:df:89:a6:86:82:3d:3f:b0:
7f:8a:a5:f1:d9:84:0d:fa:97:92:95:27:80:ba:de:5b:9e:f8:
49:05:75:d0:b3:80:15:88:84:7b:38:19:bb:75:97:0e:94:35:
2e:6b:b5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:49 2025 by rpki-client